RtkAudUService64[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

RtkAudUService64.exe
Size

1.5MB
MD5

27abec9f12a0a13a192c137d158e9a6d
SHA1

48cebbb332f38f8ee30499e9d9fff390331d5f53
SHA256

8ef5bea31d146d312cbbde1c1210d9db4af6d4a35ac9be1bd34a2bde6ed3bfb5
SHA512

7d67b70241cea1f930ac8cd52f50dcaf22136bc0786b3b8c1f1f3caeb988a595046dfd703f754dcb812868bb3a067db209b4bf078aa2d625f79dacabfeeaa87b
SSDEEP

49152:jDvWzBT6+w0Pty2eWsXYihShC1+vSg5fqeT:jrw6OfXvvqeT

Score

1^/10

Malware Config

Signatures

Files

RtkAudUService64.exe
.exe windows:6 windows x64 arch:x64

8cddd0a698c0a9305ebc37ebbf7b9d51

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:8f:52:fa:f6:4c:42:1e:ab:b2:27:5a:e1:48:c5:19
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

30-05-2022 00:00

Not After

19-07-2024 23:59

Subject

SERIALNUMBER=22671299,CN=Realtek Semiconductor Corp.,O=Realtek Semiconductor Corp.,L=Hsinchu City,C=TW,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13025457

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

Issuer

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

10-03-2022 19:58

Not After

08-03-2023 19:58

Subject

CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0b:aa:c1:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18-04-2012 23:48

Not After

18-04-2027 23:58

Subject

CN=Microsoft Windows Third Party Component CA 2012,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1f:c4:20:da:d6:9d:46:3d:85:b4:7d:ce:12:10:aa:85:70:dd:8b:43:5e:90:8a:11:f2:50:58:53:e5:a2:da:a4
Signer

Actual PE Digest

1f:c4:20:da:d6:9d:46:3d:85:b4:7d:ce:12:10:aa:85:70:dd:8b:43:5e:90:8a:11:f2:50:58:53:e5:a2:da:a4

Digest Algorithm

sha256

PE Digest Matches

true

1f:c4:20:da:d6:9d:46:3d:85:b4:7d:ce:12:10:aa:85:70:dd:8b:43:5e:90:8a:11:f2:50:58:53:e5:a2:da:a4
Signer

Actual PE Digest

1f:c4:20:da:d6:9d:46:3d:85:b4:7d:ce:12:10:aa:85:70:dd:8b:43:5e:90:8a:11:f2:50:58:53:e5:a2:da:a4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\proj\proj_20220913_RtkAudUService_HP_Nilson_cPC_RemoveToast\20220913_modify\Release\x64\RtkAudUService64.pdb

Imports

oleaut32

BSTR_UserFree64
VariantCopy
BSTR_UserSize64
LPSAFEARRAY_UserSize64
LPSAFEARRAY_UserMarshal
SafeArrayCreate
LPSAFEARRAY_UserUnmarshal64
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayPutElement
SafeArrayCreateVector
VariantClear
VariantInit
SysAllocString
BSTR_UserMarshal
BSTR_UserUnmarshal
LPSAFEARRAY_UserMarshal64
SysFreeString
LoadTypeLibEx
LPSAFEARRAY_UserFree64
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
BSTR_UserUnmarshal64
LPSAFEARRAY_UserSize
BSTR_UserMarshal64
BSTR_UserFree
BSTR_UserSize

rpcrt4

IUnknown_AddRef_Proxy
NdrStubForwardingFunction
NdrOleFree
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
IUnknown_QueryInterface_Proxy
NdrClientCall3
NdrServerCallAll
CStdStubBuffer_Invoke
IUnknown_Release_Proxy
NdrCStdStubBuffer_Release
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
RpcServerUseProtseqEpW
CStdStubBuffer_QueryInterface
RpcServerRegisterIf3
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_CountRefs
RpcServerInqBindings
RpcEpRegisterW
RpcServerListen
RpcServerUnregisterIf
RpcEpUnregister
RpcBindingVectorFree
NdrServerCall2
NdrCStdStubBuffer2_Release
NdrStubCall3
NdrOleAllocate

api-ms-win-core-com-l1-1-0

StringFromGUID2
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoInitializeEx
StringFromCLSID
CoCreateInstance
CoFreeUnusedLibrariesEx
CoRevokeClassObject
PropVariantClear
CoSetProxyBlanket
CoUninitialize
CoRegisterClassObject
CoInitializeSecurity

propsys

PropVariantToString
InitPropVariantFromCLSID

api-ms-win-core-heap-l1-1-0

HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
HeapDestroy
HeapSize

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary
LoadLibraryExW
LoadStringW
GetModuleHandleA
GetProcAddress
GetModuleFileNameW
SizeofResource
LockResource
GetModuleHandleW
FindResourceExW
FreeResource
LoadResource

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW
FindResourceW

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpA
lstrcpyW
lstrlenW
lstrcmpW

api-ms-win-core-file-l1-1-0

WriteFile
DeleteFileW
QueryDosDeviceW
FileTimeToLocalFileTime
CreateFileW
ReadFile
GetFileAttributesW

api-ms-win-core-timezone-l1-1-0

GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SystemTimeToFileTime

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW
GetDateFormatW

api-ms-win-core-synch-l1-1-0

WaitForSingleObjectEx
WaitForSingleObject
CreateEventExW
CreateMutexW
SetEvent
InitializeCriticalSectionEx
LeaveCriticalSection
ResetEvent
CancelWaitableTimer
CreateEventW
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
SetWaitableTimer
InitializeCriticalSectionAndSpinCount

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW
GetSystemTimeAsFileTime
GetLocalTime
GetSystemTime
GetTickCount

api-ms-win-core-processthreads-l1-1-1

OpenProcess
IsProcessorFeaturePresent

api-ms-win-core-handle-l1-1-0

SetHandleInformation
CloseHandle

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
GetCurrentThreadId
CreateThread
TerminateProcess
GetStartupInfoW
GetCurrentProcessId
ProcessIdToSessionId
SwitchToThread
SetProcessShutdownParameters
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateProcessAsUserW
OpenProcessToken
GetExitCodeProcess
CreateProcessW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte
GetStringTypeW

api-ms-win-core-errorhandling-l1-1-0

SetLastError
RaiseException
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError

api-ms-win-core-winrt-l1-1-0

RoUninitialize
RoInitialize
RoGetActivationFactory

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects
CreateWaitableTimerW

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsDeleteString
WindowsGetStringRawBuffer

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-registry-l1-1-0

RegGetValueW
RegNotifyChangeKeyValue
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegSetKeySecurity
RegDeleteValueW
RegFlushKey
RegEnumKeyExW
RegGetKeySecurity
RegEnumValueW

api-ms-win-core-registry-l2-1-0

RegCreateKeyW
RegDeleteKeyW

api-ms-win-core-debug-l1-1-0

OutputDebugStringA
OutputDebugStringW
IsDebuggerPresent

ext-ms-win-shell32-shellfolders-l1-1-0

SHGetFolderPathW
SHGetSpecialFolderPathW

api-ms-win-core-privateprofile-l1-1-0

GetProfileIntW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-namedpipe-l1-1-0

CreateNamedPipeW
ConnectNamedPipe
CreatePipe
DisconnectNamedPipe

api-ms-win-core-localization-l1-2-0

LCMapStringW
FormatMessageW

api-ms-win-core-heap-l2-1-0

LocalAlloc
LocalFree

api-ms-win-core-heap-obsolete-l1-1-0

LocalSize

api-ms-win-core-kernel32-legacy-l1-1-0

GetSystemPowerStatus
WTSGetActiveConsoleSessionId

api-ms-win-security-base-l1-1-0

GetSecurityDescriptorDacl
DuplicateTokenEx
SetTokenInformation
AddAccessAllowedAceEx
AdjustTokenPrivileges
GetAce
InitializeAcl
AddAce
AllocateAndInitializeSid
DeleteAce
GetAclInformation
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
CreateWellKnownSid
FreeSid
GetLengthSid

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-security-base-l1-2-2

DeriveCapabilitySidsFromName

api-ms-win-security-provider-l1-1-0

SetEntriesInAclW

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

bcrypt

BCryptImportKeyPair
BCryptEncrypt
BCryptCloseAlgorithmProvider
BCryptDestroyKey
BCryptOpenAlgorithmProvider

mfplat

MFCreateAttributes

mf

MFEnumDeviceSources

api-ms-win-service-core-l1-1-0

RegisterServiceCtrlHandlerExW
SetServiceStatus
StartServiceCtrlDispatcherW

api-ms-win-service-management-l1-1-0

CloseServiceHandle
OpenSCManagerW
OpenServiceW
DeleteService
CreateServiceW

api-ms-win-service-winsvc-l1-1-0

ControlService
QueryServiceStatus

api-ms-win-service-management-l2-1-0

QueryServiceStatusEx

api-ms-win-core-util-l1-1-0

EncodePointer
DecodePointer

api-ms-win-appmodel-runtime-l1-1-1

FindPackagesByPackageFamily

api-ms-win-mm-misc-l1-1-0

mmioDescend
mmioClose
mmioAscend
mmioOpenW
mmioSeek
mmioWrite
mmioRead
mmioSetInfo
mmioCreateChunk
mmioGetInfo
mmioAdvance

api-ms-win-core-toolhelp-l1-1-0

Process32FirstW
CreateToolhelp32Snapshot
Process32NextW

api-ms-win-security-lsalookup-l2-1-0

LookupPrivilegeValueW

userenv

CreateEnvironmentBlock

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-core-memory-l1-1-0

ReadProcessMemory

crypt32

CertFindCertificateInStore
CryptMsgGetParam
CertFreeCertificateContext
CertGetNameStringW
CertCloseStore
CryptQueryObject
CryptMsgClose
CryptDecodeObject

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork
CreateThreadpoolWork

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage
GetTraceEnableFlags
RegisterTraceGuidsW

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiGetDevicePropertyW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInstanceIdW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW

wtsapi32

WTSRegisterSessionNotification
WTSQueryUserToken

kernel32

WriteProfileStringW
WinExec

user32

KillTimer
SetTimer
RegisterDeviceNotificationW
UnregisterDeviceNotification
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
DispatchMessageW
TranslateMessage
SendInput
DefWindowProcW
FindWindowExW
LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
RegisterPowerSettingNotification
SendMessageW
GetMessageW
ShowWindow

advapi32

ReportEventW
DeregisterEventSource
RegisterEventSourceW
GetUserNameW

ole32

CoInitialize

avrt

AvSetMmThreadCharacteristicsW
AvRevertMmThreadCharacteristics

ntdll

NtQueryInformationProcess

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe
_get_wide_winmain_command_line
_initterm
_initterm_e
_invalid_parameter_noinfo
_errno
_initialize_wide_environment
_configure_wide_argv
exit
abort
_exit
_c_exit
_register_thread_local_exe_atexit_callback
_resetstkoflw
_crt_atexit
terminate
_cexit
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_initialize_onexit_table
_set_app_type

api-ms-win-crt-string-l1-1-0

wcsncmp
towupper
strcspn
islower
wcscat_s
iswspace
_wcsdup
isupper
wcscpy_s
_wcsupr_s
_wcsicmp
wmemcpy_s
wcsnlen
__strncnt
wcstok_s
strcpy_s

api-ms-win-crt-stdio-l1-1-0

_wfopen_s
__stdio_common_vsprintf_s
__stdio_common_vsprintf
fread
setvbuf
ungetc
fgetwc
fputs
fflush
__p__commode
ftell
_fseeki64
fputwc
_get_stream_buffer_pointers
fclose
fgetc
fgets
fseek
__acrt_iob_func
__stdio_common_vfwprintf
__stdio_common_vfprintf_s
_wfsopen
_set_fmode
fsetpos
__stdio_common_vfprintf
__stdio_common_vswprintf_s
__stdio_common_vswprintf
fwrite
ungetwc
_flushall
fgetpos
fputc
fputws

api-ms-win-crt-convert-l1-1-0

_wtoi
wcstoul
wcstol

api-ms-win-crt-heap-l1-1-0

realloc
free
calloc
malloc
_callnewh
_set_new_mode
_recalloc

api-ms-win-crt-math-l1-1-0

__setusermatherr
asin
frexp
pow
atan2
log10

api-ms-win-crt-locale-l1-1-0

_lock_locales
_unlock_locales
___lc_locale_name_func
___lc_codepage_func
___mb_cur_max_func
__pctype_func
setlocale
localeconv
_configthreadlocale

shlwapi

PathFileExistsW

api-ms-win-core-rtlsupport-l1-1-0

RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

Sections

.text
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 522KB - Virtual size: 521KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 139KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8cddd0a698c0a9305ebc37ebbf7b9d51

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0b:8f:52:fa:f6:4c:42:1e:ab:b2:27:5a:e1:48:c5:19Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dcCertificate

Extended Key Usages

61:0b:aa:c1:00:00:00:00:00:09Certificate

Key Usages

1f:c4:20:da:d6:9d:46:3d:85:b4:7d:ce:12:10:aa:85:70:dd:8b:43:5e:90:8a:11:f2:50:58:53:e5:a2:da:a4Signer

1f:c4:20:da:d6:9d:46:3d:85:b4:7d:ce:12:10:aa:85:70:dd:8b:43:5e:90:8a:11:f2:50:58:53:e5:a2:da:a4Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

oleaut32

rpcrt4

api-ms-win-core-com-l1-1-0

propsys

api-ms-win-core-heap-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-datetime-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-handle-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-synch-l1-2-1

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-registry-l2-1-0

api-ms-win-core-debug-l1-1-0

ext-ms-win-shell32-shellfolders-l1-1-0

api-ms-win-core-privateprofile-l1-1-0

api-ms-win-core-file-l1-2-0

api-ms-win-core-namedpipe-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-security-base-l1-1-0

api-ms-win-security-sddl-l1-1-0

api-ms-win-core-io-l1-1-0

api-ms-win-security-base-l1-2-2

api-ms-win-security-provider-l1-1-0

api-ms-win-core-registry-l1-1-1

bcrypt

mfplat

mf

api-ms-win-service-core-l1-1-0

api-ms-win-service-management-l1-1-0

api-ms-win-service-winsvc-l1-1-0

api-ms-win-service-management-l2-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-appmodel-runtime-l1-1-1

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0b:8f:52:fa:f6:4c:42:1e:ab:b2:27:5a:e1:48:c5:19
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

33:00:00:00:dc:34:1a:52:0f:bb:cf:3d:8c:00:00:00:00:00:dc
Certificate

61:0b:aa:c1:00:00:00:00:00:09
Certificate

1f:c4:20:da:d6:9d:46:3d:85:b4:7d:ce:12:10:aa:85:70:dd:8b:43:5e:90:8a:11:f2:50:58:53:e5:a2:da:a4
Signer

1f:c4:20:da:d6:9d:46:3d:85:b4:7d:ce:12:10:aa:85:70:dd:8b:43:5e:90:8a:11:f2:50:58:53:e5:a2:da:a4
Signer

.text
Size: 804KB - Virtual size: 804KB

.orpc
Size: 512B - Virtual size: 148B

.rdata
Size: 522KB - Virtual size: 521KB

.data
Size: 27KB - Virtual size: 39KB

.pdata
Size: 31KB - Virtual size: 30KB

.rsrc
Size: 139KB - Virtual size: 138KB

.reloc
Size: 9KB - Virtual size: 9KB